Daily Tech Digest - November 02, 2017

regulating-artificial-intelligence-robots-head-close-up-3d-ai-illustration
It may seem reasonable to worry about researchers developing very advanced artificial intelligence systems that can operate entirely outside human control. A common thought experiment deals with a self-driving car forced to make a decision about whether to run over a child who just stepped into the road or veer off into a guardrail, injuring the car’s occupants and perhaps even those in another vehicle. Musk and Hawking, among others, worry that a hyper-capable AI system, no longer limited to a single set of tasks like controlling a self-driving car, might decide it doesn’t need humans anymore. It might even look at human stewardship of the planet, the interpersonal conflicts, theft, fraud, and frequent wars, and decide that the world would be better without people. Science fiction author Isaac Asimov tried to address this potential by proposing three laws limiting robot decision-making


xaas-intro-main.jpg
The fundamental benefits of the 'as a service' model are well known, and include: a shift from capital to operational expenditure (capex to opex), often leading to lower TCO (total cost of ownership); access for businesses of all sizes to up-to-date technology, maintained by service providers that can leverage economies of scale; scalability according to business requirements; fast implementation times for new applications and business processes; freeing up staff and resources for other projects and priorities. Of course there are potential downsides to 'as-a-service' adoption, which include: service outages; security, governance and compliance issues; inadequate performance; hidden costs; service provider lock-in; and customer support issues. Most of these potential problems can be minimised with good planning and a tightly-defined SLA ...


Microsoft Open Sources Java Debugger for Visual Studio Code Editor

Using the VS Code Java Debugger
This week, while noting the move to open source, Microsoft also announced the open sourcing of the Java Debug Server that provides support on the back-end. "Since we first released our Java Debugger extension for Visual Studio Code on Sept. 28, it quickly became the most trending extension of the month," said Xiaokai He, program manager, Java Tools and Services, in a blog post. "And of course, lots of feedback and suggestions were submitted from our active developer community. ..." The two main improvements to the debugger mentioned by He are automatic resolution of a project's main class, so developers don't have to explicitly specify it anymore, and fully supported external source files. Speaking of the latter, He said, "With this feature, you can now also debug with third-party classes, when the source code is inside a JAR or a source attachment. And you can also set breakpoint in those classes ahead of debugging."


VHPC is on the rise, but comes with its own challenges

Despite these improvements, there are still challenges on the software side. HPC is often highly tuned and, moreover, might run on a nonmainstream Unix or Linux distribution that has many proprietary tweaks. Examples include Catamount OS, which the U.S. Department of Energy's National Nuclear Security Administration Advanced Simulation and Computing Program uses on the Red Storm supercomputer, the Compute Node Linux used in some Cray models and IBM's Compute Node Kernel. These are all lightweight kernels that minimize OS overhead. It can be difficult to get these through any hypervisor certification process, especially if they involve device drivers. One might think the answer is to go directly to a certified and supported Linux distribution, but one major issue with parallelized operations is that a compute cycle -- say an iteration of a simulation -- isn't complete until the last server finishes.


Cohesity makes it easier to manage secondary storage

Cohesity makes it easier to manage secondary storage
Cohesity customers should see a marked reduction in total cost of ownership (TCO). The deduplication and data management capabilities will likely reduce the overall amount of data stored by more than 40 percent. The reduction in secondary storage is certainly nice, but the big savings to be had is operational. By my estimate, 60 percent of the TCO from secondary storage is in people costs. Like HCI has taken a chunk out of the operational costs associated with running different workloads, it will have the same impact on secondary data management. In fact, because this area lacks any kind of best practices or strategy, it’s likely to cut operational costs by 50 percent or more, freeing up valuable time for more strategic things. If you love HCI, you’re certainly not alone, as it’s been one of the fastest-growing IT technologies.


Why digital assistants are so hot right now


AI-enabled agents make an attempt to solve the “paradox of choice” that often leads to lower customer satisfaction and abandoned carts. Many retailers, including eBay, Walmart, and Whole Foods, bet on AI-powered virtual shopping assistants to fine-tune their offerings. ...Obviously, there’s a bigger picture for each individual benefit of digital assistants. On the one hand, the growth of voice assistants runs parallel with the progress in artificial intelligence, IoT, self-driving technology, and emerging interfaces based on text, audio, image, and haptic signals. The intelligent agent serves as a practical tool for today’s high-tech environment. It becomes indispensable to the normal functioning of the new generation of devices and emerging driverless cars, connected homes, and smart cities. On the other hand, AI-enabled assistants serve as a mediator between humans and innovation.


What is Asana? Task management tracking made easy

 project management knowledge sharing
“[Asana] allows teams in organizations to determine how they need to work together,” said Margo Visitation, vice president and principal researcher at Forrester. “Whether they want to work in a way that is driven by conversations or by tasks, they have the opportunity to work in the way that is comfortable for the team.”  Raúl Castañón-Martínez, senior analyst at 451 Research, said that Asana will benefit teams that previously relied on a diverse set of tools like spreadsheets, file sharing and even email and chat apps. “As projects grow more complex it becomes a burden trying to manage teamwork this way.”  The software is relatively easy to use when compared to more complex project management tools sich as Trello and Smartsheet and is aimed at a wide range of business professionals. Asana’s product design is one of its key strengths, said Castañón-Martínez.


Google's grand plan for health, from fitness apps right up to defeating death

hospital-doctor.jpg
Its best-known healthcare product is Streams, an app designed to decrease the incidence of acute kidney injury before it occurs by alerting clinicians to the warning signs that indicate a patient is a candidate for such an injury. The app itself doesn't contain any AI at present -- think of it as more simple analytics software for healthcare -- it's likely that such elements will make their way into the products in future. The system is being trialled with the Royal Free hospital, and may be extended to other conditions where picking up the right signs early on can prevent a full-blown life-threatening condition, such as sepsis, taking hold. Other partnerships with UK healthcare organisations show the direction of travel for DeepMind's products. For example, in pilots with the Moorfields Eye Hospital and University College London Hospital,


Heart-stopping cybersecurity threats — literally

Heart-stopping cybersecurity threats — literally
As the number of internet-connected medical devices and their respective vulnerabilities continues to grow, we must proactively take substantive steps to bolster their security and protect the Americans who rely on them by establishing health-care industry guidelines for how to best to defend against these types of radical cyber assaults. I was joined by my colleague, Rep. Susan Brooks (R-Ind.), in introducing the Internet of Medical Things Resilience Partnership Act, legislation that will bring public and private sector counterparts together to address the vulnerabilities of medical technologies by establishing a robust, yet malleable, comprehensible cybersecurity framework. We cannot stand idly by while these imminent attacks threaten the American people.


Beware the promise of a digital silver bullet

Digital Trends Workplace
It could be the Architecture Tribe where everything is about infrastructure. Or the Automation Tribe who declare that robots are the only way forward. Or the Radical Redesign Tribe who will tell you it’s pointless doing anything unless you completely rethink the company from the ground up. Meanwhile, all you may want to do is row the boat a bit faster. And we chose the word ‘tribes’ with good reason. This isn’t a cohort of people rationally discussing the rights and wrongs of all their diverse approaches; these are frequently groups with fervent and invested beliefs in their own technical specialisms, who may be fiercely competitive, yet still need to be knitted together with a common purpose to create an environment of change. So how can a leader do all that? We’ve been developing a series of tools to help, one of which is the Digital Change Curve.



Quote for the day:


"The two most powerful warriors are patience and time." -- Leo Tolstoy


Daily Tech Digest - November 01, 2017

Dremio: Simpler and faster data analytics
Dremio utilizes high-performance columnar storage and execution, powered by Apache Arrow (columnar in memory) and Apache Parquet(columnar on disk). Dremio also uses Apache Calcite for SQL parsing and query optimization, building on the same libraries as many other SQL-based engines, such as Apache Hive. ,,, Dremio is the first execution engine built from the ground up on Apache Arrow. Internally, the data in memory is maintained off-heap in the Arrow format, and there will soon be an API that returns query results as Arrow memory buffers. A variety of other projects have embraced Arrow as well. Python (Pandas) and R are among these projects, enabling data scientists to work more efficiently with data. For example, Wes McKinney, creator of the popular Pandas library, recently demonstrated how Arrow enables Python users to read data into Pandas at over 10 GB/s.


Bad Rabbit ransomware data recovery may be possible


The Kaspersky team wrote in a blog post that early reports that the Bad Rabbit ransomware leaked the encryption key were false, but the team did find a flaw in the code where the malware doesn't wipe the generated password from memory, leaving a slim chance to extract it before the process terminates. However, the team also detailed an easier way to potentially recover files. "We have discovered that Bad Rabbit does not delete shadow copies after encrypting the victim's files," Kaspersky researchers wrote. "It means that if the shadow copies had been enabled prior to infection and if the full disk encryption did not occur for some reason, then the victim can restore the original versions of the encrypted files by the means of the standard Windows mechanism or 3rd-party utilities."


Cybersecurity: How Blockchain Is Helping E-Commerce Businesses Protect Their Data


By using blockchain-based smart contract technology, e-commerce businesses can be confident that data on a global network is visible only to those who are authorized to receive that data in a timely manner, enhancing the security of transactions. Smart contracts are computer protocols that facilitate transactions. They help you exchange money, property, goods, services, or anything of value in a transparent way. But they also put a premium on security since only permitted parties have access to the data. That’s because blockchain-based smart contracts are visible only to those users permitted access to the blockchain. This ensures that only certain people have access to certain data and bars outsiders from gaining entry.


Is more IoT driving more cyber attacks?

3
For general users like us, right now, there are two kinds of cyber attacks: inbound and outbound. Inbound cyber attacks target our smart devices like phones, tablets, or cameras directly. DNS Amplification Attacks are common outbound attacks, with over 80% of family level cyber attacks resulting from router issues. To this point, Helpnetsecurity suggested three tips to actively avoid attacks. First, we need to periodically change the passcode of our smart devices and family Internet. Second, do not connect to unknown Wi-Fi and Bluetooth devices. Last but not least, upgrade device software in a timely fashion. Nowadays, both iOS and Android will send out an upgraded version regularly, even every app on our phone will release upgrades frequently. Some users think these upgrades are annoying and choose to shut down this function, but most of the upgrades are related to security issues.


Enterprise Architecture For The Internet Of Things

enterprise architecture for the internet of things
It is an understatement to say that the introduction of the Internet required major changes in enterprise architectures. IT was suddenly not only managing internal applications but had to take on an external-facing web access function which grew over time from providing basic information to being fully integrated with enterprise functions like marketing, sales, support, logistics, production, documentation, and engineering. As organizations started to take advantage of evolving Internet capabilities, new functions and structures evolved over time. CIOs, webmasters, and SEOs suddenly became critical to the enterprise, and as web and mobile applications spread, so did the substantial operational IT headaches of keeping everything fully tested, functional, and operational.


30 Percent Of CEO Emails Have Been Exposed In Breaches, Leaks

According to F-Secure’s research, the breaches that revealed the highest number of CEO credentials were from sites and services that one would commonly associate to the business or corporate world.Hacks business social network LinkedIn, which occurred in 2012 and exposed more than 117 million users, and popular cloud storage service Dropbox, which also happened in 2012 and resulted in 68 million account credentials being stolen, were responsible for 71 percent of all of the exposures. In addition to having their email addresses and passwords exposed, CEOs have also had other personal information leaked through breaches. Eighty-one percent of CEOs have had data including physical addresses, birthdates and phone numbers exposed, the researchers found—many of which came from spam lists and marketing databases that were stolen.


Even data scientists are facing AI takeover

Even data scientists are facing AI automation of their work
This aversion to the dreaded word “automation” may stem from the fact that even data scientists are starting to worry about its potential impact on their own job security. It’s with this cultural zeitgeist in mind that I read Andrew Brust’s recent article about Alteryx’s new tool for “operationalizing” machine learning models. He provides a very good discussion not only of the data-science productivity-boosting benefits of that offering, but of different solutions from other vendors that all, to varying degrees, push automation deeper into data-science development, deployment, and optimization workflows. ... Although Brust says there’s “nothing but upside” to the prospect of squeezing manual labor out the data-science workflow, it’s clear that many low-level functions, which might otherwise be handled by less-skilled (but nonetheless employed) data scientists might never be touched by human hands ever again.


6 Steps to Building a Business Case for Enterprise Architecture

illu-blog-en-business-case-for-ea.jpg
Once you’ve decided on a destination, your EA GPS will provide turn-by-turn instructions on where you are now, where you want to go, and how you’re going to get there. It can also make you aware of what resources you’ll need and have access to along the way, what risks and/or obstacles you’re likely to encounter, and how to navigate around them to arrive at your strategic destination. If enterprise architecture can provide the visibility and supporting information to achieve strategic goals, why aren’t more companies investing more aggressively in EA practitioners and tools? Continuing to choose spreadsheets and static diagrams as the source of record for your EA initiatives is like choosing a gas station map in the glove compartment instead of a GPS. Is this information still accurate? Who knows – at least the map was cheap, right?


Vancouver’s chief technology officer keeping the city ahead of the digital curve


“The number one issue we deal with, hands down, is usually not a tech challenge, it’s a cultural challenge. And then the public sector adds another dimension as well in the sense that we also need to deal with process challenges with quite a few regulatory and compliance requirements,” Adcock highlights. “The trick to digital transformation in the public sector is to try and achieve that best-in-class user experience and that DNA change within the organization, all within the parameters of what our mandate is and what we’re required to do. It’s an extra layer we have to consider.” She says that justifying a complete digital transformation within the public arena can be a challenge as well, given that it is not necessarily in the same competitive environment as a business would be.


Blockchain Could Help Us Reclaim Control of Our Personal Data

oct17-05-sb10064134e-001
At a whole system level, the database is very secure. Each single ledger entry among billions would need to be found and then individually “cracked” at great expense in time and computing, making the database as a whole very safe. Distributed ledgers seem ideal for private distributed identity systems, and many organizations are working to provide such systems to help people manage the huge amount of paperwork modern society requires to open accounts, validate yourself, or make payments. Taken a small step further, these systems can help you keep relevant health or qualification records at your fingertips. Using “smart” ledgers, you can forward your documentation to people who need to see it, while keeping control of access, including whether another party can forward the information. You can even revoke someone’s access to the information in the future.



Quote for the day:


"Real leaders are ordinary people with extraordinary determinations." -- John Seaman Garns


Daily Tech Digest - October 31, 2017

Over half (54%) of German IT and Security Staff confess to Snooping on Sensitive Information about their Company’s Performance
“Despite having a reputation for taking privacy far more seriously than many other nations, including many in Europe, the German people appear to have an unhealthy interest in poking their noses into their employer’s business. “The fact that over half of German employees had attempted to uncover sensitive business information, and 80% had gone looking for other business data outside of their job requirements, suggest a potential insider threat issue for businesses in the country. “Even though the perennially conservative Brits were less nosey, the suggestion that 42% had gone looking for sensitive company information is about 42% higher than most internal security departments would be happy with.


Will Stronger Borders Weaken Innovation?

“Restrictions on visas, restrictions on talent movement, how easy it is to share technology and knowledge — none of these were issues we were talking about before our 2016 strategy review, and now they’re on our radar screen,” says Robert Pagano, chief executive officer of Watts Water Technologies, a U.S.-based global provider of products and solutions for the plumbing, heating, and water quality industry. Watts Water Technologies conducts R&D in North America, Europe, and Asia. As companies plan for their future R&D activities, says Pagano, “they will need to look at various scenarios based on the current and potential environment. The key is that you have to be flexible now, and careful not to commit [over the] long term to potential political hot spots. Uncertainty breeds uncertainty.”


Transparency: The key to risk management


Senior management needs to understand that ESG violations can cause not only reputational damage, but also serious financial risk, including loss of access to capital, regulatory fines and even criminal proceedings. The now defunct British Home Stores (BHS) was a pillar of society in the UK, but its public image of respectability obscured fraudulent behaviour by its former owners, Sir Philip Green and Dominic Chappell, who are being investigated by liquidators to determine whether they breached their duties. In April 2016, BHS went into administration, causing 11,000 job losses and leaving a £571million pension deficit. A parliamentary committee inquiry into its failure concluded that BHS had been systematically misappropriated by its directors. Following a public outcry, Mr Green agreed to pay £363million into the company’s pension scheme.


University of Manchester launches city fitness application


App users will be able to set a personal daily steps goal. Then, by plugging into other active CityVerve projects, BeeActive will offer users missions to accept. For example, if the app detects its user is on a bus, traffic is slow and the weather is fine, it might suggest getting off and walking the rest of the way. It will also include an educational component, pushing notifications about sites of historical interest, for example. “This is a really exciting opportunity to become part of Manchester’s technology demonstrator project, which could help shape the future of the way we engage with technology,” said Charlotte Stockton-Powdrell, BeeActive project manager. “It is also a chance to explore the city of Manchester, to learn more about its history and, of course, to increase your activity in a fun way.”


AI in the Boardroom: The Next Realm of Corporate Governance

Part of what’s driving the use of AI in health care is the fact that the cost of bad decisions is high. That’s the same in business, too: Consider that 50% of the Fortune 500 companies are forecasted to fall off the list within a decade, and that failure rates are high for new product launches, mergers and acquisitions, and even attempts at digital transformation. Responsibility for these failures falls on the shoulders of executives and board members, who concede that they’re struggling: A 2015 McKinsey study found that only 16% of board directors said they fully understood how the dynamics of their industries were changing and how technological advancement would alter the trajectories of their company and industry. The truth is that business has become too complex and is moving too rapidly for boards and CEOs to make good decisions without intelligent systems.


Exquisite Skills Your Development Team Must Have


It is important for them to keep in mind that customer obsession wins over the business competition. They should look to inculcate all possible pattern defining and data mining techniques to make the solution predictive and adaptive for the user. There are many very successful companies like Amazon who have exemplified the use of advanced technologies for first fuelling and then boosting their businesses. Another killer technology that felicitates business growth is machine learning. ... It is crucial for the chief architect in the development team to be aware of the new technologies know multiple frameworks in and out for a wise choice of the architecture and the platform of the business solution. Also, they must be smart enough to take decisions on the basis of their advantages and deployment of the same if needed.


How do banks charter their way to better data privacy?

thinkstockphotos vault safe bank door
The recent and coming regulations are pushing to reduce the risks related to data management on both side: integrity of the data and confidentiality of those data. Numerous regulations are already published and applicable in the U.S. Dedicated regulation will focus on the data life cycle. Other will protect the client confidentiality with cyber protection effort such as the NYS-DFS 500-23 regulation in New York. The industry leverages various frameworks either based on regulatory sources or best practices to ensure the proper identification of what needs to be protected. Unfortunately, in an intertwined ecosystem pulling a string brings all the ecosystem. This issue is faced by both front office side with the definition of the scope of data to be protected, the back office with a similar effort on the application or the IT with all the underlying infrastructure.


How is the big switch to the public cloud working out?

Microsoft has led their on-premises franchise right into their cloud and now they’re trying to expand. But I think they’re missing something important: [the] critical mass of enterprise applications. ... Strategically, I find this interesting, as most everything important in an enterprise IT landscape revolves around those beefy, mission-critical apps. All data captured leads there: web data, IoT. All business decisions are made there: analytics, big data, ML, etc. All actions within a business are driven by enterprise apps. ... The mainstream press points at Amazon as the “market leader”. True, by revenue, mostly IaaS. But there’s a whole lot of enterprise workloads left to go to the cloud. And if you’d like to get an IT manager riled up over dinner, ask them how their AWS experience is going.


Vietnam's Central Bank Announces Ban on Bitcoin Payments


The moves comes as part of a new legal framework for cryptocurrencies instigated by Vietnam's Prime Minister Nguyen Xuan Phuc. That process has now been completed and the framework submitted to the government, the State Bank indicates. Local reports suggest that the ban may already be having an impact on local institutions. News source VietnamPlus said that FTP University in Hanoi, which recently announced it would allow students to pay for tuition in bitcoin, could now be forced to reverse that decision. Representatives of the State Bank reportedly stated that, if the university continued to treat bitcoin as a "legal means of payment," it would be "committing an act of violation under the current law provisions, and may subject the university to the appropriate sanction."


How penetration testing can prevent web application attacks

Regular web application penetration tests can find security problems in websites and web applications. Testers review server systems, static content and server-side programs that implement the application logic to identify insecure development practices in the design, coding and publishing of software. Penetration testers will also provide recommendations for improving your security posture. Depending on the vulnerability, they might advise adjusting the organisation’s processes to keep untrusted data separate from commands and queries, developing strong authentication and session management controls, or separating untrusted data from active browser content. IT Governance offers fixed-price and bespoke CREST-accredited penetration tests, and all our tests are followed by reports that rank and rate vulnerabilities in your systems.



Quote for the day:


"Maturity isn't when you start speaking big things, its actually when we start understanding small things." -- Unknown


Daily Tech Digest - October 30, 2017

tlc ssds
We’re starting to see more SSDs that use triple-level cell (TLC) NAND technology. TLC can store three bits per cell. By comparison, one bit single-layer cell (SLC) SSDs offer the best performance at the cost of higher prices and lower capacities, and multi-level cell (MLC) SSDs store two bits per cell. ... TLC drives offer greater data density, in other words, which in turn can be used to increase the capacity of SSDs, or offer standard SSD capacities at lower prices. But TLC’s sustained write performance is comparatively poor—in some cases exceedingly. If you move large amounts of data, transfer speeds for these drives can fall off a cliff once you’ve exceeded the SSD’s cache. The problem isn’t universal, and it won’t matter if you don’t move big batches of files, but storage makers don’t advertise this potentially crippling SSD problem.


At the point where a robot or AI is responsive to your personal needs and highly personalized, there likely will be some emotional connection between robot/AI and you. Yonck says someone could actually become grief stricken at losing such an intelligent agent which was knowledgeable about them personally. “If that was to go away, it could be traumatic,” he says, perhaps akin to losing a pet. As we age, then, robots may be in our future. At elder-care facilities, robots could assist human staff, perhaps deliver meals and medication, maybe even provide companionship by reading stories or playing games. In the home, personal robots might offer reminders to take prescriptions, monitor your health, make phone or video calls for you and summon help in an emergency. These are good uses for this burgeoning technology.


AI in Marketing: 10 Early Use Cases


Two big AI advances have changed online searches -- and search engine optimization: voice search, and Google's RankBrain. Innovations like the Amazon Echo, Google Home, Apple's Siri, and Microsoft's Cortana make it easier for people to conduct searches with just the press of a button and voice command. That means the terms they're searching for are changing, too -- now, instead of typing in "restaurants in Boston," users can ask a device, "where should I go to dinner tonight?" RankBrain is Google's machine-learning algorithm that was created to deliver more relevant search results. It interprets queries and, using the power of AI, serves up the best possible results according to what it interprets from the language. For example, if you searched for "president" on Google in the United States, RankBrain might interpret that you wanted information about the current president and would serve you information about the individual -- and not just the office of government.


How Retailers Can Use Right Time Marketing

How Retailers Can Use Right Time Marketing
Mobile seems to be the holy grail of marketing this year, social is more imperative than ever, and multi-channel and omni-channel strategies are expected of every retailer who wants to keep up with today’s consumers. Just as notable, where real-time and instantaneous messaging were once considered to be the answer to every marketing situation, retailers must now strive to take personalization a step further and implement strategies to market to a consumer at the RIGHT time with the right message and through the right channels – which is the concept behind Right Time Marketing. So while you may not have a crystal ball to always determine the best strategy for each customer and prospect that interacts with your brand, the right blend of marketing data, technology and analytical solutions can get you close to just the right answers.


The 10 best antivirus tools for Android

android malware
By 2019, mobile malware will comprise about 33 percent of all malware reported in standard tests, up from 7.5 percent today, according to Gartner’s August 2017 “Market Guide for Mobile Threat Defense Solutions.” Though iOS devices aren’t immune from malware, “The mobile malware threat is primarily coming from Android,” said Dionisio Zumerle, research director at Gartner. The threat should be a concern for all companies with Android users, he said—especially those with large fleets of Android devices or that are in high-security verticals such as finance, healthcare, and government. Android malware is getting more sophisticated, too. Consider DoubleLocker—Android ransomware that IT security firm ESET recently detected. DoubleLocker is capable of changing a device’s PIN, preventing users from accessing their devices. It can encrypt the data on the device.


LG IoT Security Bug Highlights Risks Of Home Automation

The risk of poor IoT security isn’t limited to renegade vacuums, however: even as home video cameras and other appliances are relentlessly probed for vulnerabilities, the risk of vulnerabilities in medical devices or industrial-control sensors – which could potentially cause injury or death – have let to prioritisation of the need for urgent improvements as IoT reshapes the future of device security. LG Electronics responded quickly to the Check Point alert, remotely updating what LG manager of smart development team Koonseok Lee said in a statement was “an advanced rooting process designed to detect security issues”. The patched and updated SmartThinQ kernel has been running “smoothly and issue-free” since then, Lee said. This seemingly smooth patch process belies the experience of most IoT device makers, which have been notoriously lax on security in their devices.


Scaling Agile - Slice and Understand Together


While the various scaled frameworks provide a useful framework for the quarterly big room planning, where all teams and stakeholders get together for a couple of days, and while most organizations know how to do sprint planning, many struggle with getting 100% ready for the big room planning. This is where scaled planning with 1. slicing and 2. master planning comes in. ... Perhaps you might think you have it in place, and then you start planning and developing, and find out that actually you did not have a deep enough common understanding. What I’ve learned over the years is that the only way to find out if you’re actually ready for planning and developing is by starting planning and developing. And chances are the first time(s), you’re not ready. That’s okay, or at least it is very normal. Then you know that for next time. You have learned something.



How to make confusing privacy policies usable

First and foremost, not everyone has a law degree—a requirement to understand the legalese rampant in privacy policies. Another reason is the cost. My TechRepublic article Reading online privacy policies costs us $781 billion per year was written in 2012; one can imagine what the amount would be today. ... Unfortunately, things have gotten worse. "People are confronted with terms of service agreements and privacy policies all the time," writes Florian Schaub, assistant professor of electrical engineering and computer science at the University of Michigan, in The Conversation column Nobody reads privacy policies - here's how to fix that. "Regulations requiring these notices aim to ensure that consumers can make informed decisions, but current privacy policies miss the mark."
It's unclear what information is collected and who sees it


Cybersecurity and the CFO: Risk, Responsibility and Resilience

Cyber threats aren’t going anywhere and you can’t have a complete picture of risk if you don’t understand your organization’s security stance. If the CFO doesn’t work closely with security colleagues, cybersecurity investments will not be aligned to business objectives, and may fail to protect the company’s most vital assets and mitigate the risks that carry the highest damage potential. A McKinsey-World Economic Forum study of cybersecurity risk management practices found that “Senior-management time and attention was identified as the single biggest driver of maturity in managing cybersecurity risks—more important than company size, sector and resources provided.” Cybersecurity performance and ROI can’t be measured the same way that revenue and operating costs can.


Anatomy Of An IT Strategic Plan In The Era Of Digital Disruption

Experts and CIOs agree that effective IT strategy begins with an IT-informed business strategy. CIOs must be intimately involved in the creation of those documents and other artifacts that provide direction about what the enterprise needs to do, why it needs to do it, and how it will accomplish that. Only then can IT leaders build their own functional plans to support business strategy. “The plan is about understanding where to make investments and what capabilities the company will need — the people, partners, processes, and systems required — to do that,” says Fenwick.  When done well, IT strategic planning can be a powerful tool, setting the company up to realize key business goals and outcomes. But CIOs must be willing to embrace new approaches to planning that are more business-driven, flexible, and frequently revisited.




Quote for the day:

"Never measure the height of a mountain until you have reached the top. Then you will see how low it was." -- Dag Hammarskjold


Daily Tech Digest - October 29, 2017

Data Scraping With PHP and Python

It’s much more than any human can digest in a lifetime. To harness that data, you need not merely get access to that information but also need a scalable way to collect data so that you can organize and analyze it. That’s why you need web data scraping. Web scraping, also known as data mining, web harvesting, web data extraction, or screen scraping is a technique in which a computer program extracts large amounts of data from a website, and then, that data is saved to a local file on a computer, database, or spreadsheet in a format that you can work with for doing your analysis. Web scraping saves tons of time because it automates the process of copying and pasting selected information on a page or even entire website. Mastering data scraping can open up a new world of great possibilities for content analysis.


Building Cloud-Ready Applications into the Architecture


The classic enterprise application has multiple components like web servers, application servers, and database servers. Many of these applications were originally written during the client-server era, with the intent of running them on bare metal hardware. Despite their age, these types of applications can be made cloud-ready. Fundamentally, the components talk to each other over TCP connections using IP addresses and port numbers that are often aided by DNS. Nothing about that structure prevents these applications from running on virtual machines or even containers instead, and if they can be run on either, they can be deployed to any public or private cloud. While applications like this cannot take full advantage of the services that public clouds offer like their cloud-native brethren, there are times when a classic enterprise application can be made cloud-ready and get benefits without a complete rewrite.


The Digital Intelligence Of The World's Leading Asset Managers 2017

Where once the asset management sector was a digital desert, websites and social media channels abound. Whilst this represents genuine progress, the content and functionality within them leaves a lot to be desired in most cases. Quality search functionality is hard to find, websites resemble glorified CVs and blogs read like technical manuals. As for thought leadership, well there’s little thought and no leadership. Social media, especially Twitter and Linkedin, are swamped with relentless HR tweets and duplicate updates. It’s clear that asset managers are missing an opportunity to create content that resonates with FAIs and can build lasting two-way relationships. Over the following pages we present our findings in detail and take a closer look at the digital successes and failures within the world’s leading asset managers. We hope you find it helpful and if you have any questions please do get in touch.


Java: The Strategy Pattern

Image title
The conditional statement is a core structure in nearly all software and in many cases, it serves a very simple function: To decide the algorithm used in a specific context. For example, if we are creating a payment system, a conditional might exist to decide on the payment method, such as cash or credit card. In this case, we supply the same information to both algorithms (namely, the payment amount) and each performs their respective operations to process the payments. In essence, we are creating a series of algorithms, selecting one, and executing it. The purpose of the Strategy pattern is to encapsulate these algorithms into classes with the same interface. By using the same interface, we make the algorithms interchangeable with respect to the client using the algorithms and reduce the dependency on the algorithms from concrete algorithms to the interface that defines the algorithms.


The five D's of data preparation

Data preparation is the task of blending, shaping and cleansing data to get it ready for analytics or other business purposes. But what exactly does data preparation involve? How does it intersect with or differ from other data management functions and data governance activities? How does doing it well help business and IT users – and the organization overall? Data preparation is a formal component of many enterprise systems and applications maintained by IT, such as data warehousing and business intelligence. But it’s also an informal practice conducted by the business for ad hoc reporting and analytics, with IT and more tech-savvy business users (e.g., data scientists) routinely burdened by requests for customized data preparation. These days there’s growing interest in empowering business users with self-service tools for data preparation


What’s Behind the Hype About Artificial Intelligence?

pic
A lot of the hype originates from the extrapolation of current trends and ignoring the reality of taking something from a research paper to an engineered product. As a product manager responsible for building products using the latest AI technology, I am constantly trying to separate the hype from reality. The best way to do this is to combine the healthy skepticism of an engineer with an optimism of a researcher. So you need to understand the underlying technical principles driving the latest cool AI demo and be able to extrapolate only the parts of the technology that have firm technical grounding. For example, if you understand the underlying drivers of improvements in say speech recognition it becomes easy to extrapolate the upcoming improvements in speech recognition quality.


Walmart deploys shelf-scanning robots to free up employees to help customers

The use of robots to check on out-of-stock items could also help save customers time, guaranteeing that more products would be in stock when they visited a store. Walmart also noted in the post that it hopes the technology makes the shopping experience more convenient. Automation—robotics especially—have been a sensitive subject in conversations around the future of work. While Walmart claims to be using the technology to complement its human workers, and free them up to accomplish more complex tasks, the same isn't true for every implementation of the technology. In fast food, for example, a robot named Flippy has been used to make to burgers. Additionally, the growth of autonomous vehicles has also been predicted to eventually be a major disruptor of the trucking market, with manufacturers like Tesla pushing full-steam ahead on such efforts.


The perfect recipe for a top-notch cybersecurity professional


From a technical perspective, every cyber security professional must have a few core ingredients. The first ingredient is a tool such as Nessus, which is for network vulnerability scanning. A cybersecurity professional must be able to use this tool to gain an understanding of critical and high vulnerabilities within a network and provide remediation strategies to improve boundary security. The second would then be Nmap, which is a network mapping tool that allows cybersecurity professionals to map the boundary of a network to research vulnerable points of that same network. A new ingredient that has become more necessary and commonly used in the last few years is the knowledge of cloud security. Technical knowledge of cloud architecture enables cybersecurity professionals to focus on Identity management for cloud systems and accounts.


What might your IT organisation look like in 2030?

The IT organisation is also an innovation and enablement hub for both external and internal products and services, rather than a principally internal technology function like in 2017. The IT domain is largely concerned with an appropriate balance of inventing, experimenting and optimising/tuning. To innovate products, the CIO engages people from the arts through to the sciences. IT domains in 2030 need anthropologists to interpret behaviours and psychology. They need designers to imagine and create products and services to optimise customer experiences. Architects and digital urban planners model and shepherd the digital environment. Engineers build components of external and internal IT products and services connected in a mesh across the Internet of Everything. Data scientists craft ever-smarter machine algorithms and attend to the availability and quality of data that feeds the systems' learning.


A Checklist for Securing the Internet of Things

When it comes to connected devices, it isn't always clear when a device is compromised. Today, nearly all employees have their smartphones with them at work. These personal devices are often unsecured and could become vulnerable due to malicious applications. Using risk and behavior analytics, the enterprise can accurately and efficiently monitor how IoT devices are behaving in order to identify whether the device has deviated from its normal limits. Any deviation can promptly signal a compromised device. We can learn from how the credit card industry addresses fraudulent activity across accounts. When it comes to transactions, once an action is deemed unordinary from the customer's general spending habits, the credit card company restricts access to the card. This entire process is based on behavioral analytics that are used to determine the amount of risk associated with abnormal behaviors.



Quote for the day:


"You have to have your heart in the business and the business in your heart." -- An Wang


Daily Tech Digest - October 27, 2017

The coming revolution is about an AI understanding the human brain — our preferences, our choices, or desires. That will require a Herculean effort. For one thing, my preferences change. Today I’m thinking about biking apparel, tomorrow I’m thinking about going to the beach. An AI will have to adapt, respond, adjust, and customize a thousand times per day. It will need to work like the human brain, constantly making micro-adjustments based on changing variables. A true AI is one that serves us and knows us; we no longer have to know or serve it. We speak and it hears us. We don’t need to learn its parameters, it will learn our parameters. We’re not there yet, of course. Most of us are still tethered to a smartphone all day. By 2030 or so, bots will become adaptive assistants that learn about our behaviors and fit smoothly into our daily routine. We’ll stop being enamored by tech. 


The push toward comprehensive endpoint security suites

The push toward comprehensive endpoint security suites
In a recent research project, ESG asked 385 security professionals the following question, “As new endpoint security requirements arise and your organization considers new endpoint security controls, which of the following choices do you think would be most attractive to your organization?”  The results were quite interesting, as 44 percent of respondents said they would choose a comprehensive endpoint security suite from a “next-generation” vendor, 43 percent said they would choose a comprehensive endpoint security suite from a single established vendor, 8 percent said they would choose an assortment of endpoint security technologies from different vendors, and 3 percent said they would choose an assortment of endpoint security technologies from vendors that establish technical partnerships for integration.


Science may have cured biased AI

machine learning
Scientists at Columbia and Lehigh Universities have effectively created a method for error-correcting deep learning networks. With the tool, they’ve been able to reverse-engineer complex AI, thus providing a work-around for the mysterious ‘black box’ problem. Deep learning AI systems often make decisions inside a black box – meaning humans can’t readily understand why a neural-network chose one solution over another. This exists because machines can perform millions of tests in short amounts of time, come up with a solution, and move on to performing millions more tests to come up with a better solution. The researchers created DeepXplore, software that exposes flaws in a neural-network by tricking it into making mistakes. Co-developer Suman Jana of Columbia University told EurekAlert:


FILE PHOTO: An attendant holds a bitcoin sign during the opening of Hong Kong's first bitcoin retail store February 28, 2014. REUTERS/Bobby Yip/File Photo
Opening a Bitcoin wallet is just one contingency plan firms can make to prepare for cyber breaches in which client data is stolen, according to John Sweeney, president of IT and cyber security advisors LogicForce. This can be a useful "last resort" when the data is not backed up and cannot be restored unless a ransom is paid. "The firms doing this are smarter," said Sweeney, and are looking to take "conscientious" proactive, rather than reactive, steps. Sweeney stressed he did not generally advocate paying ransoms, but said it "makes sense" for firms to have a Bitcoin wallet to hand. "I certainly don't see it as a bad move," he said. Data breaches at law firms are a growing concern: confidential information, often sent in unencrypted emails, risks being stolen and ransomed back to firms, used for fraud or sold to third parties to be used in crimes such as insider trading.


In actual fact, banks are now competing against every firm in the world that delivers a powerful, positive and engaged digital experience for their customers. If we take customer-centric innovators like Amazon, Netflix, Google and Facebook, and examine what sets them apart from the competition, we see it’s their ability to experiment, scale and deliver new features and functionality almost on a constant basis. And how do they manage this? They leverage the full capabilities and flexibilities that cloud technologies can offer.  It is this shift that is responsible for the banking world now embracing digital transformation. Once the realm of retail banking, digital transformation is now entering the unchartered territories of front, middle and back office operations of commercial, investment, business and private banks.


The #1 IOT Challenge: Use Case Identification, Validation and Prioritization

So while we have an amazing compilation of technologies, sensors, gateways, connected devices and such for capturing data, understanding ahead of time what you are doing to do with that data – and why – is important because it frames what technologies, architectures, data, analytics and applications the organization is going to need in order to “monetize” IOT. So before you jump into the IOT pond, let’s make sure that there are no logs, boulders or sea monsters waiting for you. Let’s start our IOT journey by first creating an “IOT Business Strategy.” ... There is a bounty of business use cases from which the business can choose in order to monetize their IOT efforts. However this bounty of use cases is both a gift and a curse because the best way to ensure that you don’t successfully complete any use case is to try to do them all.


Will Machine Learning Make You a Better Manager?


“If you are a credit card processor and you have everyone’s transactions, you could predict whether a particular customer is going to run themselves into debt and default in the future.” Machine learning is even being used to learn more about machines, says Teodorescu, who points out that manufacturers are increasingly using algorithms for preventive maintenance. “You can predict when things are going to break down based on prior performance,” Teodorescu says. “That could preempt costly assembly line shutdowns later.” In all of these ways, it’s clear that while machines may not be taking over the world any time soon, machine learning certainly is. “It will become less and less a mysterious thing and more of a regular topic taught in schools in 20 years,” says Teodorescu. “It will be something everyone learns.”


Building Reactive Systems Using Akka’s Actor Model & DDD


The actor model is designed to be message-driven and non-blocking, with throughput as part of the natural equation. It gives developers an easy way to program against multiple cores without the cognitive overload typical in concurrency. Let’s see how that works. Actors consist of senders and receivers; simple message-driven objects designed for asynchronicity. Let's revise the ticket counter scenario described above, replacing a thread based implementation with actors. An actor must of course run on a thread. However, actors only use threads when they have something to do. In our counter scenario, the requestors are represented as customer actors. The ticket count is now maintained with an actor, and it holds the current state of the counter. Both the customer and tickets actors do not hold threads when they are idle or have nothing to do, that is, have no messages to process.


Microsoft's open source sonar tool helps developers find security flaws in their websites

Beyond open sourcing the code, Microsoft donated the project to the JS Foundation over the summer to make it more accessible to all. Microsoft intended for sonar to "avoid reinventing the wheel," Molleda wrote, instead tapping and integrating existing tools and services that help developers build for the web. With that being the case, sonar integrates with aXe Core, AMP validator, snyk.io, SSL Labs, and Cloudinary. The tool could make a real difference for developers in terms of producing higher quality websites: A recent Northeastern University analysis of over 133,000 websites found that 37% had at least one JavaScript library with a known vulnerability. As ZDNet noted, Snyck also ran a scan of the top 5,000 URLs earlier this year, and found that more than 76% were running a JavaScript library with at least one vulnerability as well.


Sony’s big bet on 3D sensors that can see the world

The new 3-D detectors are in a category called time-of-flight sensors, which scatter infrared light pulses to measure the time it takes for them to bounce back. The basic technology has been around for a while and forms the basis for the Xbox’s motion-based Kinect, as well as laser-based rangefinders on autonomous vehicles and in military planes. Sony’s big innovation over existing TOF sensors is that they’re smaller and calculate depth at greater distances. Used with regular image sensors, they effectively give machines the ability to see like humans. “Instead of making images for the eyes of human beings, we’re creating them for the eyes of machines,” Yoshihara said. “Whether it’s AR in smartphones or sensors in self-driving cars, computers will have a way of understanding their environment.” The most immediate impact from TOF sensors, which will be fabricated at Sony’s factories in Kyushu, will probably be seen in augmented-reality gadgets.



Quote for the day:


"Education's purpose is to replace an empty mind with an open one." -- Malcolm Forbes


Daily Tech Digest - October 26, 2017

You might soon be able — if you're so inclined — to join a bonefide church worshiping an artificially intelligent god.  Former Google and Uber engineer Anthony Levandowski, according to a recent Backchannel profile, filed paperwork with the state of California in 2015 to establish Way of the Future, a nonprofit religious corporation dedicated to worshiping AI. The church's mission, according to paperwork obtained by Backchannel, is "to develop and promote the realization of a Godhead based on artificial intelligence and through understanding and worship of the Godhead contribute to the betterment of society." ... Levendowski's pitch for an AI church comes amid apocalyptic warnings from tech and science luminaries like Elon Musk and Stephen Hawking to the dangers of artificial intelligence.


India Warily Eyes AI

The IT industry may employ only a few million of India’s 1.3 billion people—but it has been a beacon for young men and women with aspirations. It motivated families to send their children to university, placed graduates in gleaming campuses, conferred independent urban lifestyles upon them, and provided stable incomes and access to the world outside India. Over the last 30 years, moreover, it has been the only industry in India to begin from seed and bloom to such success. India is otherwise struggling to create jobs: 12 million Indians enter the workforce every year, but only 135,000 jobs in the formal economy’s eight biggest sectors—including IT—were created in 2015. A dramatic contraction of the IT industry—a dimming of the beacon—would jolt the country’s economy and polity deeply.


Use of IoT in corporate networks is soaring

wireless network - internet of things edge [IoT] - edge computing
Even the omnipresent issue of IoT security seems to be less frightening to companies than before – just 7% of those with bigger (10,000+ devices) deployments said that security was their top concern, although most still acknowledged its importance. Earlier editions of the study cited security as a top concern among up to 29% of companies. Roughly two-thirds of all respondents said that their IoT deployments were “mission-critical” and admitted that a security breach would be catastrophic. Even though the study found growth largely across the board, some verticals saw particularly strong uptake – retail, transportation and energy all grew at better than 17% year-on-year, while other sectors – including those like healthcare and automotive, where IoT has been popular for somewhat longer – continued to grow at a respectable 9% and 12%, respectively.


Agility, comradery drive CA Technologies' strategy turnaround

"There is nothing stronger than pitching something that shows a customer you are in the same boat as they are. It demonstrates you have a deeper appreciation for what they are going through," said Ayman Sayed, ... Moreover, CA Technologies' strategy wraps its portfolio of agile, DevOps and security products around its software development cycle, with a blueprint in hopes to offer a better overall software development environment. CA will also offer technical support through the planning, building, testing and deployment stages to get customers more familiar with some of these newer technologies. One IT professional with a technology services company who worked with CA as part of a digital transformation project said CA's training and technical services helped speed his company's transition to improve its overall operations' performance and agility.


So You Want to Be a Data Scientist? – It’s Complicated

So You Want to Be a Data Scientist? – It’s Complicated
Anyone who is considering a career in data science needs to understand first, the myriad of things such a career involves, the type of education and training required, and exactly what the job market holds. And because the field is growing so fast, students and mid-career professionals both have an opportunity to move into data science careers, if they get the right education and training. There is no single definition of data science, as it varies with industry, specific business, and what the purpose of the data scientist’s role is. And different roles require different skill sets, therefore the educational and training path is not uniform. Data scientists can come from many fields – math, statistics, computer science, and even engineering. But the role the scientist is to play is now generally broken down into two large categories


Edge Analytics – What, Why, Who, When, Where, How

Descriptive analytics focuses on what happened, diagnostic analytics relays why it happened, predictive analytics previews what is likely to happen and prescriptive analytics conveys options on what you should do about it. But you’ll be missing out on an exciting area called Edge Analytics if you relied solely on this type of classification. Let’s look at the scenario of an offshore oil rig which has hundreds of sensors collecting data but miles away from any decent data center to process and analyze this data. What if the sensors had access to decentralized process systems that could perform data analytics and possibly shut off a faulty valve right then and there based on the diagnosis and prediction? Wouldn’t that be more efficient than sending all that sensor data back to central data centers miles away and relaying back the same information much later? Yes, that’s where edge analytics comes in.


How CIOs can Help Improve Enterprise Agility

We can cite the benefits of the ability to react more quickly to change, the delivery of business value on an incremental basis, and the improved satisfaction customers have with our products due to their day-to-day involvement. We have also seen greater morale and increased employee engagement among our development team members. But a company cannot become agile simply by expanding the use of sprints, stand-up meetings, and burndown charts into every department. ... The extent of your company’s agility is determined by the degree to which you can change course, and the speed at which you can achieve this change. Marc Benioff, CEO of Salesforce.com, declared at Davos that “speed is the new currency of business.” But if your momentum prevents you from quickly changing direction, you may find yourself moving swiftly to the wrong destination. The increasing unpredictability of our world demands more and more agility.


Bad Rabbit: Ten things you need to know about

Russian cybersecurity company Group-IB confirmed at least three media organisations in the country have been hit by file-encrypting malware, while at the same time Russian news agency Interfax said its systems have been affected by a "hacker attack" -- and were seemingly knocked offline by the incident. Other organisations in the region including Odessa International Airport and the Kiev Metro also made statements about falling victim to a cyber-attack, while CERT-UA, the Computer Emergency Response Team of Ukraine, also posted that the "possible start of a new wave of cyberattacks to Ukraine's information resources" had occurred, as reports of Bad Rabbit infections started to come in. At the time of writing, it's thought there are almost 200 infected targets and indicating that this isn't an attack like WannaCry or Petya was -- but it's still causing problems for infected organisations.


Doubling Up on AV Fails to Protect 40% of Users from Malware Attacks

Nearly 40% of users who had multiple, traditional antivirus solutions loaded on their endpoints faced a malware attack during the first half of the year, a Malwarebytes report revealed today. The Mapping AV Detection Failures report, which scanned nearly 10 million endpoints, found a number of malware attacks occurred despite having two or more traditional, or signature-based, antivirus solutions installed. "The takeaway for enterprises is [that] the most basic threats have not been caught by the AV they have deployed," says Marcin Kleczynski, Malwarebytes CEO. "Yet, they continue to use these and grow desensitized." He adds CISOs and other IT security leaders may be adopting a common assumption that no one ever gets fired for using antivirus software from the industry leaders, especially when analysts rate them high on the effectiveness scale in comparative reports.


The impact of threat hunting on your security operations

In general, threat hunting can be most efficiently implemented by organizations that already have a solid, mature information security operations center (SOC) and computing incident response team (CIRT). While the latter two are holding the fort (so to speak), threat hunters are free to cast a wider net.Threat hunting starts with the assumption that an incident has happened, but it’s not based on already received alerts. It can be based on findings from previous hunts, or information from outside the organization. Effective hunts depend more on the knowledge, skills and instincts of human analysts than on tools. It is generally acknowledged that, while senior SOC analysts and incident responders can have the right foundation for threat hunting, in order to be good threat hunters they also have to be able to think creatively and see the big picture. Still, there can be no doubt that good tools can help threat hunters channel their capabilities more efficiently.



Quote for the day:


"More people would learn from their mistakes if they weren't so busy denying them." -- Harold J. Smith